SPLUNK Enterprise And ITSI Expert

Job Title: SPLUNK Enterprise and ITSI Expert
Location: London, Birmingham or Sheffield
Day Rate- £515 INSIDE IR35
Duration- 30/11/2026- may be extended
Job Type: Contract

Hybrid- 3 days per week in the office

We're searching for a Splunk powerhouse - someone who doesn't just use Splunk, but engineers it into a mission-critical observability engine across hybrid Kubernetes and OpenShift environments.

What You'll Own

Platform Engineering & Architecture

• Design, deploy, and operate Splunk Enterprise & ITSI across hybrid Kubernetes/OpenShift estates

• Lead large-scale data onboarding (HEC, Universal Forwarder, Deployment Server)

• Enforce CIM alignment, RBAC, retention strategy, and cost guardrails

• Govern ingest controls, PII compliance, TLS security, and token governance

OpenShift & Kubernetes Observability

• Build executive and operational dashboards covering:

  • API & etcd health

  • Node readiness and resource pressure

  • Pod restart hotspots

  • Network & storage errors

  • Capacity, quotas & burst visibility

• Correlate logs, metrics, and events for true full-stack insight

• Detect noisy neighbors and capacity risks before they bite

• ITSI Engineering Excellence

• Develop service decompositions and health models

• Engineer KPIs with adaptive/time-based thresholds

• Tune NEAP policies for meaningful alerting

• Build glass tables, deep dives, and Service Analyzer configurations

• Create powerful service health scoring models for exec & ops audiences

Performance & Cost Optimisation

• Tune workload rules, concurrency, DMA & summary indexing

• Apply scheduling hygiene and ingest governance

• Drive license optimisation and cost control frameworks

Security, Compliance & Governance

• Implement TLS/mTLS and certificate hygiene

• Manage index/role mappings and auditability

• Enforce PII controls and data quality SLAs

• Govern allow/deny lists and ingestion policies

Automation & Integrations

• Integrate OpenTelemetry, Prometheus exporters, Fluentd/Fluent Bit/Vector, Kafka (TLS)

• Enable ITSM & ChatOps routing with enrichment and suppression controls

• Implement maintenance windows and runbook automation

• Deliver CMDB enrichment & AIOps/ML anomaly detection integrations

What You Bring

Splunk ITSI Deep Expertise

• Service trees & decompositions

• Multi-KPI thresholds & adaptive policies

• NEAP tuning

• Glass tables & deep dive builds

• Service Analyzer configuration

Cloud-Native Observability

• Kubernetes/OpenShift control-plane & workload telemetry

• Golden signals & SLO engineering

• Rollout/rollback health validation

• Namespace-to-service KPI mapping

If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format.

Disclaimer
Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies.
Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.